Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/BiNbYTTasCZvijlgJedoTXddLAM.roa
File: BiNbYTTasCZvijlgJedoTXddLAM.roa (raw, json)
Hash identifier: yQnUwY+f4aVVi8+5ahzv8n6+TxMdI/uYulJt2sbodXM=
Subject key identifier: 06:23:5B:61:34:DA:B0:26:6F:8A:39:60:25:E7:68:4D:77:5D:2C:03
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01898648D679DE83782B4C39318FD9FF59C5
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/BiNbYTTasCZvijlgJedoTXddLAM.roa
Signing time: Mon 24 Jul 2023 05:04:27 +0000
ROA not before: Mon 24 Jul 2023 05:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31363
IP address blocks: 86.62.84.0/24 maxlen: 24
86.62.94.0/24 maxlen: 24
86.62.96.0/24 maxlen: 24
86.62.92.0/24 maxlen: 24
86.62.102.0/24 maxlen: 24
86.62.110.0/24 maxlen: 24
86.62.112.0/24 maxlen: 24
86.62.118.0/24 maxlen: 24
86.62.114.0/24 maxlen: 24
86.62.115.0/24 maxlen: 24
86.62.116.0/24 maxlen: 24
86.62.117.0/24 maxlen: 24
86.62.113.0/24 maxlen: 24
86.62.119.0/24 maxlen: 24
86.62.125.0/24 maxlen: 24
195.91.254.0/24 maxlen: 24
195.91.255.0/24 maxlen: 24
195.91.204.0/24 maxlen: 24
195.91.208.0/24 maxlen: 24
195.91.209.0/24 maxlen: 24
195.91.210.0/24 maxlen: 24
195.91.211.0/24 maxlen: 24
195.91.213.0/24 maxlen: 24
195.91.215.0/24 maxlen: 24
195.91.217.0/24 maxlen: 24
195.91.218.0/24 maxlen: 24
195.91.219.0/24 maxlen: 24
195.54.210.0/24 maxlen: 24
195.91.222.0/24 maxlen: 24
195.91.223.0/24 maxlen: 24
195.91.224.0/24 maxlen: 24
195.91.220.0/24 maxlen: 24
195.91.221.0/24 maxlen: 24
195.91.225.0/24 maxlen: 24
195.91.226.0/24 maxlen: 24
195.91.232.0/24 maxlen: 24
195.91.233.0/24 maxlen: 24
195.91.229.0/24 maxlen: 24
195.91.230.0/24 maxlen: 24
195.91.231.0/24 maxlen: 24
195.91.227.0/24 maxlen: 24
195.91.228.0/24 maxlen: 24
195.91.236.0/24 maxlen: 24
195.91.237.0/24 maxlen: 24
195.91.238.0/24 maxlen: 24
195.91.234.0/24 maxlen: 24
195.91.235.0/24 maxlen: 24
195.91.239.0/24 maxlen: 24
195.91.240.0/24 maxlen: 24
195.91.246.0/24 maxlen: 24
195.91.243.0/24 maxlen: 24
195.91.244.0/24 maxlen: 24
195.91.245.0/24 maxlen: 24
195.91.241.0/24 maxlen: 24
195.91.242.0/24 maxlen: 24
195.91.252.0/24 maxlen: 24
195.91.247.0/24 maxlen: 24
86.62.75.0/24 maxlen: 24
195.91.149.0/24 maxlen: 24
195.91.148.0/24 maxlen: 24
195.91.156.0/24 maxlen: 24
195.91.160.0/24 maxlen: 24
195.91.166.0/24 maxlen: 24
195.91.168.0/24 maxlen: 24
195.91.169.0/24 maxlen: 24
195.91.170.0/24 maxlen: 24
195.91.171.0/24 maxlen: 24
195.91.172.0/24 maxlen: 24
195.91.178.0/24 maxlen: 24
195.91.179.0/24 maxlen: 24
195.91.173.0/24 maxlen: 24
195.91.174.0/24 maxlen: 24
195.91.175.0/24 maxlen: 24
195.91.181.0/24 maxlen: 24
195.91.184.0/24 maxlen: 24
195.91.191.0/24 maxlen: 24
195.91.187.0/24 maxlen: 24
195.91.197.0/24 maxlen: 24
195.91.138.0/24 maxlen: 24
195.91.133.0/24 maxlen: 24
195.91.145.0/24 maxlen: 24
195.91.144.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:48:d6:79:de:83:78:2b:4c:39:31:8f:d9:ff:59:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jul 24 05:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06235b6134dab0266f8a396025e7684d775d2c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:b2:9d:d5:9d:90:ae:1c:95:14:b2:36:d7:
4b:1b:d3:69:71:b2:0a:74:d2:a1:1e:ee:cf:a5:1b:
b2:3d:d5:59:1e:0c:08:0e:5f:00:de:64:36:ce:70:
ba:98:95:ae:00:48:4f:56:3e:66:48:33:7a:6c:94:
65:57:9b:3c:24:e7:7b:ae:e4:b1:31:69:d5:4d:9e:
5d:0e:2f:33:db:0e:04:57:ec:df:67:c5:f6:c6:46:
0e:fd:ec:76:15:22:02:b4:c3:03:8c:be:48:3a:89:
ab:f9:0f:fe:58:93:59:57:d9:e9:99:b1:9a:ff:83:
15:6e:ff:4d:74:44:92:b2:c2:52:b1:cb:cc:8d:ce:
7c:16:7a:e8:cb:fe:08:84:7a:96:27:40:1d:3b:e4:
8e:78:12:56:06:8d:2a:82:d2:74:cb:2b:74:25:40:
4e:36:07:74:64:04:1c:48:78:33:80:fc:e3:cb:35:
a2:74:e6:37:ad:5d:7b:24:91:aa:59:14:8c:a4:c6:
2a:28:cc:3c:3f:74:d8:b0:04:e4:a9:92:16:97:93:
ad:8e:6b:2d:93:24:1a:ab:58:16:1d:49:4b:91:74:
ac:02:c1:d2:a4:8f:26:ff:d2:87:84:d6:84:7f:61:
30:cf:bd:08:65:73:dc:e1:0c:fc:ab:de:2d:a4:32:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:23:5B:61:34:DA:B0:26:6F:8A:39:60:25:E7:68:4D:77:5D:2C:03
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/BiNbYTTasCZvijlgJedoTXddLAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.75.0/24
86.62.84.0/24
86.62.92.0/24
86.62.94.0/24
86.62.96.0/24
86.62.102.0/24
86.62.110.0/24
86.62.112.0/21
86.62.125.0/24
195.54.210.0/24
195.91.133.0/24
195.91.138.0/24
195.91.144.0/23
195.91.148.0/23
195.91.156.0/24
195.91.160.0/24
195.91.166.0/24
195.91.168.0/21
195.91.178.0/23
195.91.181.0/24
195.91.184.0/24
195.91.187.0/24
195.91.191.0/24
195.91.197.0/24
195.91.204.0/24
195.91.208.0/22
195.91.213.0/24
195.91.215.0/24
195.91.217.0-195.91.247.255
195.91.252.0/24
195.91.254.0/23
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
db:e5:fe:6e:a6:bd:87:74:98:3f:09:f1:4b:2a:37:13:e6:e1:
52:68:8d:25:56:75:9f:1f:88:f0:b0:56:be:4b:36:48:53:c4:
21:d7:78:77:b9:58:c5:b2:55:5a:b5:28:4c:a6:ae:3a:34:63:
fb:5c:94:16:0b:f7:1f:d6:b0:6a:d1:b1:ff:e1:2d:c5:22:c8:
1d:4b:de:48:e8:82:d6:c3:a5:c4:9d:d0:a3:20:93:20:cc:f7:
21:c2:e5:3d:55:90:be:4d:2d:6b:4d:db:e3:c9:47:eb:f6:50:
da:61:11:89:68:e9:46:0c:fb:ce:1a:8d:b1:09:17:41:fc:35:
85:0e:ca:bb:d2:ae:a1:5a:0f:26:3b:f0:96:0d:98:77:a1:98:
11:2e:02:7b:23:d7:28:ab:cb:82:5e:d6:10:3c:02:19:e7:d9:
bd:f8:aa:ca:d1:c6:bd:37:30:be:e9:f7:5a:58:b9:c1:f8:25:
ae:e5:39:79:da:8c:58:a4:9e:0a:56:81:b6:12:33:af:1c:0f:
a8:e0:2f:98:51:b9:81:b3:ed:47:60:9c:5a:27:21:f4:9e:71:
13:fc:39:6c:30:d6:f9:20:8e:13:9c:da:69:a6:8e:87:79:fb:
cf:61:00:79:fa:5e:2a:63:d1:bd:8d:bf:a3:db:b9:aa:95:4f:
45:9f:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:13 2025 by rpki-client